X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=src%2FModule%2FOwa.php;h=322cafa0971d0fb46dfdaae458fb9391ccac07cd;hb=c947b7f211e2468561a8864b2141dfcbfe65b63b;hp=68f31c59de23aab272d19b7a17b1254c259affeb;hpb=11310f4cf0eb66206ba758e178a892345028bf15;p=friendica.git diff --git a/src/Module/Owa.php b/src/Module/Owa.php index 68f31c59de..322cafa097 100644 --- a/src/Module/Owa.php +++ b/src/Module/Owa.php @@ -1,18 +1,37 @@ . + * */ + namespace Friendica\Module; use Friendica\BaseModule; +use Friendica\Core\Logger; use Friendica\Core\System; use Friendica\Database\DBA; use Friendica\Model\Contact; use Friendica\Model\OpenWebAuthToken; use Friendica\Util\HTTPSignature; +use Friendica\Util\Strings; /** - * @brief OpenWebAuth verifier and token generator + * OpenWebAuth verifier and token generator * * See https://macgirvin.com/wiki/mike/OpenWebAuth/Home * Requests to this endpoint should be signed using HTTP Signatures @@ -25,7 +44,7 @@ use Friendica\Util\HTTPSignature; */ class Owa extends BaseModule { - public static function init() + public static function init(array $parameters = []) { $ret = [ 'success' => false ]; @@ -54,14 +73,13 @@ class Owa extends BaseModule if (DBA::isResult($contact)) { // Try to verify the signed header with the public key of the contact record // we have found. - $verified = HTTPSignature:verifyMagic($contact['pubkey']); + $verified = HTTPSignature::verifyMagic($contact['pubkey']); if ($verified && $verified['header_signed'] && $verified['header_valid']) { - logger('OWA header: ' . print_r($verified, true), LOGGER_DATA); - logger('OWA success: ' . $contact['addr'], LOGGER_DATA); + Logger::debug('OWA header', ['addr' => $contact['addr'], 'data' => $verified]); $ret['success'] = true; - $token = random_string(32); + $token = Strings::getRandomHex(32); // Store the generated token in the databe. OpenWebAuthToken::create('owt', 0, $token, $contact['addr']); @@ -73,17 +91,17 @@ class Owa extends BaseModule // At a later time, we will compare weather the token we're getting // is really the same token we have stored in the database. openssl_public_encrypt($token, $result, $contact['pubkey']); - $ret['encrypted_token'] = base64url_encode($result); + $ret['encrypted_token'] = Strings::base64UrlEncode($result); } else { - logger('OWA fail: ' . $contact['id'] . ' ' . $contact['addr'] . ' ' . $contact['url'], LOGGER_DEBUG); + Logger::info('OWA fail', ['id' => $contact['id'], 'addr' => $contact['addr'], 'url' => $contact['url']]); } } else { - logger('Contact not found: ' . $handle, LOGGER_DEBUG); + Logger::info('Contact not found', ['handle' => $handle]); } } } } } - System::jsonExit($ret, 'application/x-dfrn+json'); + System::jsonExit($ret, 'application/x-zot+json'); } }